Post
Topic
Board Bitcoin Discussion
Re: Germany's Adaption To Bitcoin *AMAZING*
by
keystroke
on 25/05/2013, 00:23:33 UTC
Well the first reply happened in < 5 minutes!

Notice the link URL is *NOT* the URL that the anchor text is. The forum shouldn't allow this.

Definitely a scam / attempted virus. And yes those accounts are fake.

MODERATORS REMOVE THIS!

What's wrong with that link?  I saw an ad and a Guardian News article.

The Guardian News article is embedded in the page. But at the bottom of the page is the following code:

^M
^M
http://ge.tt/api/1/files/8jfPsUh/0/blob?download">^M
^M

It attempts to install a trojan. Here is my wget dump... sorry I don't have time to do more in depth analysis on this. But definite virus.

--2013-05-24 20:23:47--  http://ge.tt/api/1/files/8jfPsUh/0/blob?download
Resolving ge.tt... 79.125.123.149
Connecting to ge.tt|79.125.123.149|:80... connected.
HTTP request sent, awaiting response... 307 Temporary Redirect
Location: http://w301638.open.ge.tt/1/files/8jfPsUh/0/blob?referer=&user=anon-ZTCGfaS4PKRSc7YJ6rx4rfqpUptUTnjUPMceEpmd-&download= [following]
--2013-05-24 20:23:47--  http://w301638.open.ge.tt/1/files/8jfPsUh/0/blob?referer=&user=anon-ZTCGfaS4PKRSc7YJ6rx4rfqpUptUTnjUPMceEpmd-&download=
Resolving w301638.open.ge.tt... 54.228.183.153
Connecting to w301638.open.ge.tt|54.228.183.153|:80... connected.
HTTP request sent, awaiting response... 307 Temporary Redirect
Location: http://w144938.blob4.ge.tt/streams/8jfPsUh/Flash%20Update%202.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download [following]
--2013-05-24 20:23:47--  http://w144938.blob4.ge.tt/streams/8jfPsUh/Flash%20Update%202.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download
Resolving w144938.blob4.ge.tt... 54.247.2.234
Connecting to w144938.blob4.ge.tt|54.247.2.234|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 819200 (800K) [application/x-msdownload]
Saving to: `Flash Update 2.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download'

100%[===================================================================================================================>] 819,200      341K/s   in 2.3s

2013-05-24 20:23:50 (341 KB/s) - `Flash Update 2.06.exe?sig=-T7ZGwmaPGTWW0NNN1c11zAKOW7ecvJ-qBE&type=download' saved [819200/819200]